Top 20 passwords you really shouldn’t be using in 2024 revealed

Are you still using a hackable password? (Picture: Getty Images/iStockphoto)

If you want to cut the risk of being hacked it might seem obvious that using the password ‘password’ isn’t the wisest move.

Despite this, new research NordPass suggests it’s the most used password in the UK this year.

The second most used password, meanwhile, was ‘qwerty123’ (qwerty is the first five letters on the top row of a keyboard for anyone puzzled), while the third was ‘qwerty1’.

Football teams feature heavily in the list, with ‘liverpool’ coming in at number four, ‘liverpool1’ at number 9, ‘arsenal’ at ten, ‘chelsea’ at 12 and ‘rangers’ at 18.

Fourth place goes to the number sequence ‘123456’, while sixth is 123456789 and seventh ‘password1’.

Further down the list, but still in the top 20 is the name charlie and charlie1.

The results are worrying, as most of these passwords can by cracked by cybercriminals in less than a second.

The researchers at NordPass, a password manager service, used a 2.5 terabyte database of leaked passwords from across the internet and dark web to compile a list of the 200 most common passwords used this year, with the top 20 in the UK shared below.

Nordpass recommends a password with at least 20 characters (Picture Getty Images)

They found that 21,128 UK accounts use the word ‘password’ and 7,338 accounts use ‘password1’.

A total of 17, 415 accounts used the number sequence 123456.

Huge numbers of corporate accounts, according to NordPass’s research, also featured easily hackable passwords.

Worldwide, the top three most popular passwords for work accounts were ‘123456’, ‘123456789’, and ‘12345678’.

The password ‘123456’ was used for a whopping ‘1,233,477’ work accounts.

Many corporate accounts were also still using default passwords, NordPass’s research showed.

Another mistake many people continue to make is using the same password across accounts.

Karolis Arbačiauskas, head of business product at NordPass, said: ‘Password reuse is widespread, and the reason is simple — it’s just easier.

‘Nevertheless, cybersecurity hygiene requires using a different password for every account because the convenience of password reuse does not outweigh the risks it poses.

‘For example, if your credentials were breached or a hacker were to brute-force their way into one of your accounts by repeatedly trying different combinations until they gain access, they would most certainly try to use that password with the rest of your accounts.’

As well as using different passwords for each account, Mr Arbačiauskas recommends people use passwords that are at least 20 characters long.

This makes it much harder for criminals to break into your account, he said.

Though please avoid 1234567891234556789123456789.

Get in touch with our news team by emailing us at webnews@metro.co.uk.

For more stories like this, check our news page.